Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6cdf89ae-b7b8-46f6-8cec-0d697d61281f.roa
File: 6cdf89ae-b7b8-46f6-8cec-0d697d61281f.roa (raw, json)
Hash identifier: 1iOWpykyG0gpRP/gKiW3WdUFNbtwtGFg5QDSjayzH84=
Subject key identifier: 32:87:5C:4E:65:2A:0D:A6:0D:33:B2:85:22:99:9E:06:08:7A:E5:3C
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 1BEA064D8465BAE1CA29AFF9BAF5FAF1F42569C1
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6cdf89ae-b7b8-46f6-8cec-0d697d61281f.roa
Signing time: Fri 10 Jan 2025 00:00:00 +0000
ROA not before: Fri 10 Jan 2025 00:00:00 +0000
ROA not after: Fri 14 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 15.136.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:ea:06:4d:84:65:ba:e1:ca:29:af:f9:ba:f5:fa:f1:f4:25:69:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 10 00:00:00 2025 GMT
Not After : Feb 14 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:53:25:96:13:2a:7f:6b:20:c3:0e:c8:6a:c7:
77:1d:dc:73:b7:db:f2:1b:52:b5:ed:70:c7:86:1c:
10:a3:f1:e6:1a:12:aa:73:d1:07:81:bc:ae:ac:32:
dd:16:54:b0:04:5b:cc:85:8d:d3:84:13:4a:5e:80:
28:a7:bb:e2:90:35:0b:fe:64:f1:42:e8:41:da:68:
d3:34:65:30:b1:ba:0f:4f:ca:c8:ad:ef:91:2b:4f:
8d:4a:29:98:56:34:67:4a:f4:fa:b9:35:f0:8d:54:
1a:1d:11:aa:19:9d:93:83:d8:6c:a3:d5:21:22:c0:
91:c8:56:70:22:7a:a6:6c:4b:90:79:b5:fc:dc:79:
3a:23:8b:a8:de:93:2e:3d:27:4e:5f:b6:f5:f3:e5:
b8:87:00:39:66:80:5f:f6:43:27:37:16:04:c6:90:
77:b5:92:70:6c:01:d6:da:58:79:a9:b8:e0:c2:b8:
9e:22:bf:70:35:66:53:f9:0e:15:e2:bb:cc:b1:27:
87:70:a2:53:a5:01:e7:cf:7e:e7:52:a9:6a:98:e5:
72:94:62:5d:e1:22:b7:7a:70:22:18:85:e6:41:80:
10:80:eb:46:2e:2b:39:a5:aa:15:38:60:88:36:12:
39:c6:f1:c1:3a:b5:eb:38:00:91:e8:09:d0:ce:e1:
fe:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:87:5C:4E:65:2A:0D:A6:0D:33:B2:85:22:99:9E:06:08:7A:E5:3C
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6cdf89ae-b7b8-46f6-8cec-0d697d61281f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.136.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0d:5e:32:31:83:27:d8:90:77:72:9d:01:5c:bc:a4:b4:90:ea:
84:69:90:c5:d0:f9:8d:8f:da:25:42:c4:0d:d7:ca:04:eb:10:
3c:5a:64:46:5b:11:1d:92:79:64:44:c6:ef:df:ec:b7:12:28:
e4:23:93:72:2d:fe:e1:eb:1f:2c:49:77:64:6e:33:b9:07:c0:
a3:67:44:79:e9:0e:df:01:20:88:e3:f6:09:4b:73:e3:56:59:
b8:4c:f4:26:bb:f2:c0:45:43:d0:20:2d:67:f2:29:64:80:22:
7c:bb:97:38:2c:df:98:f4:1b:dd:4f:10:6e:fe:ab:87:cd:83:
5e:c8:57:91:24:a9:94:31:d3:e4:da:e8:b6:d8:f5:3e:9c:e1:
14:3d:37:3e:3a:a8:27:09:7a:3f:69:04:7d:e7:23:60:e1:f6:
c1:fa:55:43:1a:bc:45:59:f8:97:57:72:68:28:40:de:0c:bb:
12:57:63:77:31:99:89:a6:a6:84:ab:0e:16:6f:99:f3:ef:b5:
1e:2b:be:2a:6c:bc:dc:43:6d:62:e0:43:3d:07:db:70:85:f9:
bb:d3:6b:da:5b:67:c1:58:95:e3:1b:b3:20:b3:ca:ab:61:8e:
40:e3:fc:f2:c8:1c:35:60:06:21:fe:da:d1:9c:8d:9d:7f:90:
58:00:27:6f
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUG+oGTYRluuHKKa/5uvX68fQlacEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTEwMDAwMDAwWhcNMjUwMjE0MjM1OTU5
WjB6MUkwRwYDVQQFE0A4ODNmYmI2NzQzNjNhNjE5MmRiMDhkMjU4NThjNWFiYjdj
YjM3OWM3OGY1MjU0ZGNkM2VkODQ3ZmU5OTM0OTZkMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC5UyWWEyp/ayDDDshqx3cd3HO32/IbUrXtcMeGHBCj8eYa
Eqpz0QeBvK6sMt0WVLAEW8yFjdOEE0pegCinu+KQNQv+ZPFC6EHaaNM0ZTCxug9P
ysit75ErT41KKZhWNGdK9Pq5NfCNVBodEaoZnZOD2Gyj1SEiwJHIVnAieqZsS5B5
tfzceToji6jeky49J05ftvXz5biHADlmgF/2Qyc3FgTGkHe1knBsAdbaWHmpuODC
uJ4iv3A1ZlP5DhXiu8yxJ4dwolOlAefPfudSqWqY5XKUYl3hIrd6cCIYheZBgBCA
60YuKzmlqhU4YIg2EjnG8cE6tes4AJHoCdDO4f5TAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUModcTmUqDaYNM7KFIpmeBgh65TwwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzZjZGY4OWFlLWI3YjgtNDZmNi04Y2VjLTBkNjk3ZDYxMjgxZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAPiDANBgkqhkiG9w0BAQsFAAOCAQEADV4yMYMn2JB3cp0BXLyktJDqhGmQ
xdD5jY/aJULEDdfKBOsQPFpkRlsRHZJ5ZETG79/stxIo5COTci3+4esfLEl3ZG4z
uQfAo2dEeekO3wEgiOP2CUtz41ZZuEz0JrvywEVD0CAtZ/IpZIAifLuXOCzfmPQb
3U8Qbv6rh82DXshXkSSplDHT5Nrottj1PpzhFD03PjqoJwl6P2kEfecjYOH2wfpV
Qxq8RVn4l1dyaChA3gy7EldjdzGZiaamhKsOFm+Z8++1Hiu+Kmy83ENtYuBDPQfb
cIX5u9Nr2ltnwViV4xuzILPKq2GOQOP88sgcNWAGIf7a0ZyNnX+QWAAnbw==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:54:44 2025 by rpki-client